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Is IT Transformation and Mobility threatening the Enterprise Network 
Environment? 

Where Key Security Battles are Taking Place Today — and Essential Strategies for Winning Them 




The secure Perimeter - The Zombie Proof House 
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AGENDA 




The Enterprise's Strategic Security 
Imperatives 
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A New Approach - Pervasive Security 
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TODAY'S SHIFTING THREAT LANDSCAPE 




The Sophisticated Cybercriminal 

Cybercriminals - from students to well paid organised professionals 

APT's - Advanced Persistent Threats - Sophisticated and strategic 
efforts aimed at intelligence gathering and espionage 
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TODAY'S SHIFTING THREAT LANDSCAPE 




The Threat from Within 

Insiders with and without malicious intent 
The mobile device as Trojan Horse 



Computers, Smartphones, 








► 



Enterprise 
Infrastructure 
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DISTRIBUTED ENTERPRISE IN THE NEW NETWORK 

Global High-Performance Network 



Clients 
(billions) 

D D 

Mobile 



Mega Data Centres 
(thousands) 




SECURITY'S EVOLVING AND EXPANDING BATTLE-FRONTS 
MOBILITY 



The Decentralised Nature of Attacks 




Inadequate security 
on mobile devices 




Diverse user 
profiles 



Mm 

Device and OS 
proliferation 
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Increasing 

implementation 

points 
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NEW RESEARCH - 

THE GAP BETWEEN BEHAVIOUR AND THE DESIRE TO BE SAFE 
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40 



% 

use their smartphone 
for both personal and business 



72% 



share or access sensitive 

info such as banking, credit 

card, social security, medical records 



80% 



access their employer's network 
without permission - 59% do it 
everyday 



50%+ 



are very concerned about loss, theft 
and identity theft resulting from their 
mobile usage 



Sources: KRC Research and Juniper Mobile Threat Center 
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MALWARE HISTORY TELLS US TWO THINGS 



1 . Malware changes and gets more sophisticated 



Academic Foundation 

Theory of self-reproducing 

automata 

John von Neumann, 

Institute for Advanced 

Study Site Y 

Los Alamos 
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Executable Boot 
Sector Infections 



ElkCloner 
(Apple II) '81 



Executable Boot 
Sector Infections 



Brain Boot Sector 
(PC) '86 
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Macro Viruses 



Concept '95 
Melissa '99 



Network Worm 



Code Red '01 
Nimda '01 



Mobile Malware 



SMS Trojan - '09 Symbian, 
July, '10 Android 
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i-rea uonen 

"On the implications of 

Computer Viruses and Methods of 

Defense" 



Anti-Virus Firms 

20 + anti-virus firms 



2. Waiting and reacting after-the-fact can be costly 
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EVOLUTION OF MOBILE MALWARE 
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Criminals now using PC-style malware 
attacks to infect mobile devices 



FlexiSpy, Mobile Spy, MobiStealth.. 




Mobile spyware is prevalent and now commercialised 



■i 



n 



Mobile Adds in Add Stores 
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Greatest mobile malware risk comes from rapid 
proliferation of applications in app stores 



200! 



2010 



Between 2009 and 2010, reported increase 
in mobile threats of 250%* 



'Information obtained from analysis of Junos Pulse Mobile Security Suite virus definition database dated 10/15/2010 
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SECURITY'S EVOLVING AND EXPANDING BATTLEFRONTS 
CLOUD 



The Cloud and Web 2.0 
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Virtualisation 
complexity 


One Web, Clouds of 
many uses uncertainty 
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THREE DRAMATIC CHANGES TO DATA CENTRE 
PROVIDE SIGNIFICANT SECURITY OPPORTUNITIES 




53% 

Of companies have planned DC 
expansion and or consolidation 
projects in the next few years 



75% 

Of DC traffic will shift from 
client-server to server- 
server, up from just 5% today 
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Mega Consolidation 

Efficiency improvements and 
simplified administration 



Service Oriented 
Architectures 

Web 2.0 and Application 
Mashups 



; 



Sources: AFCOM Data Center Research, Gartner, KRC Research - 
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DATA CENTRE PARADIGM SHIFT 



r 


Consolidation 


North - South East - West 
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Scale 
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Visibility 



More information 



User ID 
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Application 



Better Security Decisions 



Device 



Location 



Enforcement 



Security at the Perimeter 



Castle 




Security Between Zones and VMs 



Hotel 
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MANAGING INTEGRATED NETWORKING AND SECURITY 



Security Function 




View and Manage all 
Vital Security Functions 



Accommodate New 
Security Services 
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MANAGING INTEGRATED NETWORKING AND SECURITY 



Multilayer Intelligence 
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Take a Cohesive, Enforce Application- 

Centralised Approach Centric Security Policies 
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Identify Threats to 

the Virtual 

Infrastructure 
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A NEW APPROACH IS REQUIRED 



Complete Solutions for Dynamic Threats and Environment 




Continuous, 
Complete Security 



Strengthened 
Network Performance 



Agility to respond to 

changing business and 

security needs 



PERVASIVE SECURITY STARTS WITH A GROUND UP VIEW 
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THE CHALLENGE: THE SECURE ENTERPRISE PLATFORM 
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INTERNET 
A CENTRE 



Monitoring & 
Management 
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DATA CENTRE 




MANAGED 
NETWORK 



End to End Security 
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SUMMARY 



Network Security 

■Increasing rate of new vulnerabilities and exploits 
■Manage the proliferation of collaborative applications 



Compliance 

■ Meeting strict regulatory requirements 

■ Streamline audit process 

Maximize ROI and reduce TCO 

■ Optimise existing infrastructure 

■ Security, QoS, SLA and other implications 
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OPTUS 
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WE LOOK FORWARD 

TD HELPING YOU 

WORK BETTER IN UNISON 

1300 788 410 
www.alphawest.com.au 



